Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2025-11906: Incorrect Permission Assignment for Critical Resource	6.7 Medium	N/A	0%	Oct 30, 2025
CVE-2025-54547: Insufficient Session Expiration	5.3 Medium	N/A	0%	Oct 29, 2025
CVE-2025-54546: Incorrect Permission Assignment for Critical Resource	7.5 High	N/A	0%	Oct 29, 2025
CVE-2025-1037: Improper Privilege Management	N/A	7.5 High	0%	Oct 28, 2025
CVE-2025-1036: Improper Neutralization of Special Elements used in an OS Command	N/A	8.7 High	1%	Oct 28, 2025
CVE-2025-58356: Improper Verification of Cryptographic Signature	N/A	8.3 High	0%	Oct 27, 2025
CVE-2025-59459: Allocation of Resources Without Limits or Throttling	7.5 High	N/A	0%	Oct 27, 2025
CVE-2025-41110: Improper Authentication	8.8 High	7.0 High	0%	Oct 22, 2025
CVE-2025-11534: Authentication Bypass Using an Alternate Path or Channel	N/A	9.3 Critical	1%	Oct 21, 2025
CVE-2025-11625: Improper Authentication	9.8 Critical	9.4 Critical	0%	Oct 21, 2025
CVE-2025-58778: Hidden Functionality	7.2 High	8.6 High	1%	Oct 16, 2025
CVE-2025-59975: Uncontrolled Resource Consumption	7.5 High	8.7 High	0%	Oct 9, 2025
CVE-2025-61985: Improper Neutralization of Null Byte or NUL Character	3.6 Low	N/A	0%	Oct 6, 2025
CVE-2025-61984: Improper Handling of Invalid Use of Special Elements	3.6 Low	N/A	0%	Oct 6, 2025
CVE-2025-6985: Improper Restriction of XML External Entity Reference	7.5 High	N/A	1%	Oct 6, 2025
CVE-2025-32942: Always-Incorrect Control Flow Implementation	7.2 High	N/A	0%	Oct 2, 2025
CVE-2025-59951: Use of Less Trusted Source	9.1 Critical	9.2 Critical	5%	Oct 1, 2025
CVE-2025-34217: Use of Hard-coded Cryptographic Key	9.8 Critical	10.0 Critical	1%	Sep 30, 2025
CVE-2025-34207: Insufficiently Protected Credentials	9.8 Critical	7.9 High	1%	Sep 29, 2025
CVE-2025-57602: Use of Hard-coded Credentials	9.8 Critical	N/A	1%	Sep 22, 2025
CVE-2025-57601: Use of Hard-coded Credentials	9.8 Critical	N/A	0%	Sep 22, 2025
CVE-2025-34198: Use of Hard-coded Credentials	9.8 Critical	9.3 Critical	1%	Sep 19, 2025
CVE-2025-10650: Improper Privilege Management	N/A	1.8 Low	0%	Sep 18, 2025
CVE-2025-6237: External Control of File Name or Path	9.8 Critical	N/A	0%	Sep 18, 2025
CVE-2025-59339: Missing Cryptographic Step	4.4 Medium	N/A	0%	Sep 17, 2025

25 rows per page

701-725 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report